CVE-2026-12765

Langflow can make unauthenticated server-side requests to unintended destinations

IBM / Langflow · Langflow OSS

First documented disclosure · Review checkpoint

Summary

IBM reports that an unauthenticated caller can induce outbound requests from a Langflow server.

Severity and exploitation evidence

Medium · 6.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed IBM bulletin and CNA record do not document malicious exploitation or an affected customer.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The server sends a request selected by an untrusted caller. The exact unauthenticated handler is unspecified in IBM’s entry for this CVE.

Conditions required

The vulnerable service is reachable by an unauthenticated caller and can connect to the target destination.

Potential impact

A caller may enumerate services visible from the Langflow host or use the host to send unauthorized requests. Response-body access is unverified for this CVE.

Affected versions and configurations

1.0.0 through 1.10.2, inclusive, according to IBM.

Fix and mitigation status

1.10.3 addresses this issue according to IBM.

Practical next steps

Upgrade to a supported release containing the 1.10.3 fix. Restrict the service’s outbound network destinations.

Operating lesson

Test outbound restrictions from the server’s network position, including unauthenticated routes.

Evidence and limits

The grouped bulletin describes named components and authenticated scenarios. IBM’s individual entry specifies no authentication for CVE-2026-12765. Those component examples and response-extraction claims cannot be assigned to this CVE individually.

Sources